| title | Security & privacy |
|---|---|
| description | How your data is stored, protected, and kept private |
| icon | shield |
Your bookmarks, files, and personal data are private by default. Raindrop.io runs on a paid subscription model — no ads, no tracking, no selling your data. This page explains what's happening behind the scenes to keep everything safe.
All data is stored in the cloud on Amazon Web Services (AWS) servers in Frankfurt, Germany. Three copies of your data are kept across distributed data centers in Germany at all times.
AWS provides industry-leading infrastructure security including a dedicated firewall, key-based SSH authentication, and continuous monitoring. The hosting environment is regularly updated and actively checked for potential intrusions.
Every connection to Raindrop.io is encrypted over HTTPS with RSA 2048-bit keys. The security configuration supports modern standards including Perfect Forward Secrecy (PFS) and SHA-256 digests, earning a Qualys SSL rating of "A".
Your data is continuously backed up. In the event of a failure, it can be restored to any point in time within the past year.
On top of that, you can create your own backups at any time — see Export & backup for details.
- Your collections are private by default — no one can see them unless you explicitly make them public or share with collaborators
- Uploaded files require authentication to access. Even if someone gets a direct link, it is temporary and expires after 10 minutes
- Two-factor authentication is available for an extra layer of login security
Raindrop.io is an independent, bootstrapped product with over 13 years on the market — no investors, no corporate parent.
Revenue comes entirely from Pro subscriptions. There is no advertising, no data mining, and no selling of user data — your information is used only to run the service.
Every app — web, desktop, mobile, browser extension — is open source on GitHub. You can inspect exactly what data each app collects and where it goes. No black boxes.
For full legal details, see the Privacy Policy and Terms of Service.
On Amazon Web Services (AWS) servers in Frankfurt, Germany. Three copies are maintained across distributed data centers.<Accordion title="Is my data encrypted?">
All connections between you and Raindrop.io are encrypted over HTTPS with RSA 2048-bit keys, Perfect Forward Secrecy, and SHA-256 digests.
</Accordion>
<Accordion title="Can someone access my uploaded files directly?">
No. File access requires authentication, and direct links are temporary — they expire after 10 minutes. Collections are private unless you explicitly share them.
</Accordion>
<Accordion title="Does Raindrop.io sell my data?">
No. Revenue comes from Pro subscriptions. There is no advertising or data selling. All apps are open source — you can verify this yourself by reviewing the code on [GitHub](https://github.com/raindropio).
</Accordion>
<Accordion title="What happens if something goes wrong with the servers?">
Data is backed up continuously and can be restored to any point within the past year. Three copies are always maintained across multiple data centers.
</Accordion>
<Accordion title="How can I delete my data?">
You can [delete your account](/transfer) at any time. You can also email info@raindrop.io to request data deletion.
</Accordion>